[TLS] Rizzo claims implementation attach, should be interesting

[Tim Dierks <[e-mail]>]

Does anyone have any ideas what Rizzo may be announcing @ ekoparty?

http://www.ekoparty.org/2011/juliano-rizzo.php

BEAST: Surprising crypto attack against HTTPS

We present a new fast block-wise chosen-plaintext attack against SSL/TLS. We
also describe one application of the attack that allows an adversary to
efficiently decrypt and obtain authentication tokens and cookies from HTTPS
requests. Our exploit abuses a vulnerability present in the SSL/TLS
implementation of major Web browsers at the time of writing.

 - Tim